Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8906f82-500a-3a4b-9923-e54ac2a31c19.roa
File:                     e8906f82-500a-3a4b-9923-e54ac2a31c19.roa (raw, json)
Hash identifier:          6adSYgckSKf+Tu4jTShJdlX3oAUifnfuNpMrIu/usx0=
Subject key identifier:   A3:F1:2B:DD:8A:BE:43:42:40:39:E1:D9:AE:4F:A3:27:FA:14:51:17
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B11DAA402AECE0FF946D400
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8906f82-500a-3a4b-9923-e54ac2a31c19.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     32463
IP address blocks:        209.226.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:11:da:a4:02:ae:ce:0f:f9:46:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=7baba476-e7f3-40f2-8cbd-bcc317b442d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:64:41:a3:3e:18:16:2f:c1:b1:40:2b:66:
                    f5:46:5a:81:ea:60:2b:13:cc:b5:da:dd:c9:22:3a:
                    4c:b1:41:a9:40:2e:7b:1f:64:b5:c0:64:a4:6d:bb:
                    43:6f:c1:11:ce:d2:35:90:44:6c:a6:61:d3:6d:bf:
                    d3:d5:a0:5d:ec:50:6b:ee:9f:20:34:6c:96:eb:b4:
                    bd:5b:42:3d:69:44:cf:01:86:bd:5d:d5:94:d7:c8:
                    4d:ee:a4:36:83:fc:3e:91:14:c8:32:59:2e:6e:2e:
                    61:57:90:ca:04:e5:ae:ab:1d:01:de:b5:d5:04:e7:
                    4a:85:83:c9:60:3f:e2:bc:e8:90:18:42:1a:b3:0a:
                    81:78:70:e3:13:9f:12:fd:71:ef:73:96:e0:0c:78:
                    e5:6e:3d:6e:36:a9:49:4e:49:c4:0e:ea:68:bc:75:
                    35:63:ee:ab:55:5f:50:f2:a6:c3:a7:d0:50:66:33:
                    65:64:06:91:59:45:f6:a6:7a:80:0d:2b:93:8e:ed:
                    4a:a9:03:8b:4f:d5:dd:2e:0b:b7:a7:46:0c:b3:7d:
                    73:87:58:36:7a:da:17:8d:9a:37:0b:0b:af:62:9c:
                    56:53:92:07:e1:21:f4:de:e3:23:82:e3:4b:c9:7f:
                    98:b9:fd:94:1f:68:1b:ea:11:01:ba:a2:dc:1f:4d:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:2B:DD:8A:BE:43:42:40:39:E1:D9:AE:4F:A3:27:FA:14:51:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e8906f82-500a-3a4b-9923-e54ac2a31c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:25:b7:be:22:dd:0e:66:fe:44:05:12:b8:0b:25:b1:c2:97:
         cb:d0:b3:7a:4f:ce:fd:cc:2e:65:5b:63:dc:9e:45:af:23:e9:
         c9:93:04:09:b4:90:3b:f3:89:7f:64:0c:a2:29:df:a9:af:47:
         cb:9e:e3:68:9d:63:31:46:d1:0c:bd:a9:7c:44:27:fb:97:fa:
         be:00:1c:46:05:03:cc:44:8a:15:a9:17:c5:cd:b2:5a:d5:de:
         41:89:f5:78:16:7b:08:0b:33:ed:56:3d:fc:6e:0f:51:7d:34:
         23:3f:5b:d7:a2:3a:e7:fb:e8:ef:72:e4:5a:0d:cc:ec:07:5c:
         71:3a:03:96:3c:3e:cc:64:f3:46:8e:72:88:6e:70:aa:10:1b:
         96:7e:9a:48:5e:3b:d7:aa:61:87:e8:2b:8d:72:19:ab:a2:4e:
         28:2c:a8:2b:2b:e0:22:9e:4c:c1:00:39:dc:16:18:e0:3a:4a:
         a2:20:c8:94:17:46:ad:0f:fe:27:8f:cd:1a:95:d0:b3:16:de:
         eb:42:ba:51:42:91:36:3c:61:40:bb:79:eb:46:c6:2b:82:f8:
         8e:29:95:af:17:02:81:8d:98:6f:71:bb:ec:a2:1c:2e:d9:87:
         58:b4:d7:c7:80:ec:bc:de:d3:b9:d0:c4:7a:92:6b:41:75:0e:
         c4:8c:94:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcrEdqkAq7OD/lG1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDkwOTEyMDAwMFoXDTI0MTIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
N2JhYmE0NzYtZTdmMy00MGYyLThjYmQtYmNjMzE3YjQ0MmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVxkQaM+GBYvwbFAK2b1RlqB6mArE8y12t3J
IjpMsUGpQC57H2S1wGSkbbtDb8ERztI1kERspmHTbb/T1aBd7FBr7p8gNGyW67S9
W0I9aUTPAYa9XdWU18hN7qQ2g/w+kRTIMlkubi5hV5DKBOWuqx0B3rXVBOdKhYPJ
YD/ivOiQGEIaswqBeHDjE58S/XHvc5bgDHjlbj1uNqlJTknEDupovHU1Y+6rVV9Q
8qbDp9BQZjNlZAaRWUX2pnqADSuTju1KqQOLT9XdLgu3p0YMs31zh1g2etoXjZo3
CwuvYpxWU5IH4SH03uMjguNLyX+Yuf2UH2gb6hEBuqLcH0151QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPxK92KvkNCQDnh2a5Poyf6FFEXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTg5MDZmODItNTAwYS0z
YTRiLTk5MjMtZTU0YWMyYTMxYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eJNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwlt74i3Q5m/kQFErgLJbHCl8vQs3pPzv3MLmVbY9yeRa8j6cmTBAm0
kDvziX9kDKIp36mvR8ue42idYzFG0Qy9qXxEJ/uX+r4AHEYFA8xEihWpF8XNslrV
3kGJ9XgWewgLM+1WPfxuD1F9NCM/W9eiOuf76O9y5FoNzOwHXHE6A5Y8Psxk80aO
cohucKoQG5Z+mkheO9eqYYfoK41yGauiTigsqCsr4CKeTMEAOdwWGOA6SqIgyJQX
Rq0P/iePzRqV0LMW3utCulFCkTY8YUC7eetGxiuC+I4pla8XAoGNmG9xu+yiHC7Z
h1i018eA7Lze07nQxHqSa0F1DsSMlNA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org